Software-Defined Storage Security Module for Consistent Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Software defined storage systems lack consistent security enforcement, particularly for workloads that do not have built-in security solutions, leading to varying or inadequate data protection.
Innovation Solution
Implement a security module within the software defined storage architecture that intercepts data access requests, performing security operations such as classification, encryption, and access control independently of the computing workload, ensuring seamless security enforcement across different platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If computing systems or workloads apply their own security solutions, then security enforcement varies by platform, but this leads to inconsistent security across different workloads and platforms
Solution Approach 1:
The patent introduces a security module as an intermediary component within the SDS architecture that sits between data storage and access requests. This module intercepts I/O operations and applies security policies centrally, eliminating the need for each workload to implement its own security solutions while maintaining consistent security enforcement across all platforms and workloads.
Solution Approach 2:
The patent segments the security function from the workload execution environment by creating a dedicated security module within the SDS layer. This separation allows security operations to be performed independently of the specific workload or platform, enabling consistent security enforcement without requiring each computing system to be security-configured.
2Reliability
If security operations are performed by the SDS system, then platform-independent security is achieved, but this increases the complexity of the storage system
Solution Approach 1:
The patent merges the security module with the existing SDS architecture, integrating security functionality into the storage management layer rather than creating a separate system. This integration allows the SDS system to provide both storage management and security operations through a unified architecture, improving data protection reliability while managing complexity through consolidation rather than multiplication of components.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Providing secure software defined storage includes identifying data directed to be stored in a software defined storage location, intercepting the data, performing a security operation on the intercepted data, and transmitting the data to the software defined storage.